Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft
File: SYN20qIgPYbnmm1ESVq_xIkDFGU.mft (raw, json)
Hash identifier: zyrdjEsiMq0vAnKFs7yU2ZZ+wNrjKkngYuofeMoBIWI=
Subject key identifier: B6:C8:70:1F:D3:F1:A2:05:8E:A6:59:59:75:1D:4E:4D:A9:93:BE:FA
Authority key identifier: 49:83:76:D2:A2:20:3D:86:E7:9A:6D:44:49:5A:BF:C4:89:03:14:65
Certificate issuer: /CN=498376d2a2203d86e79a6d44495abfc489031465
Certificate serial: 019D258365A1BA26B84EBC842C55BE98C9AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYN20qIgPYbnmm1ESVq_xIkDFGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft
Manifest number: 0F6A
Signing time: Wed 25 Mar 2026 15:01:01 +0000
Manifest this update: Wed 25 Mar 2026 15:01:01 +0000
Manifest next update: Thu 26 Mar 2026 15:01:01 +0000
Files and hashes: 1: SYN20qIgPYbnmm1ESVq_xIkDFGU.crl (hash: Ro4WFmIYNDXhLZ3TSIE/Xrh9bolc051RBHD0iRrLaKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYN20qIgPYbnmm1ESVq_xIkDFGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:65:a1:ba:26:b8:4e:bc:84:2c:55:be:98:c9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498376d2a2203d86e79a6d44495abfc489031465
Validity
Not Before: Mar 25 15:01:01 2026 GMT
Not After : Mar 26 15:01:01 2026 GMT
Subject: CN=b6c8701fd3f1a2058ea65959751d4e4da993befa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:b6:aa:e4:43:76:4c:61:98:60:fa:be:20:
0d:ba:be:88:2f:d5:7e:84:05:5c:1a:12:8a:b9:63:
89:4b:76:1c:d9:74:69:87:c0:bd:28:82:8a:ea:53:
ae:85:f4:1b:10:90:2f:c4:aa:6c:f2:5f:09:55:cc:
51:1d:c1:86:89:b0:3e:bd:34:eb:2f:cf:0c:49:23:
0f:1d:b4:75:3f:e7:0d:ee:6e:5f:20:0d:35:ad:15:
db:57:5b:40:22:41:3a:23:b4:00:32:a9:88:3c:5f:
28:35:73:3e:96:1e:0c:dd:bb:f7:e0:70:56:65:e7:
81:46:89:d8:96:63:9c:b1:de:5a:8e:17:0e:86:ec:
9c:34:11:e4:ac:51:0d:dd:3e:7a:47:0e:0d:71:50:
01:da:f5:66:66:64:b6:cb:e5:03:0f:83:f5:08:3e:
bc:94:98:b1:41:3d:c9:fc:1f:ff:c8:9b:cb:be:6f:
c8:fd:4d:ff:ad:f1:54:ee:b5:a0:4f:b7:76:5f:2d:
be:ee:21:d7:9c:95:5b:cd:8f:39:e6:99:66:46:fc:
17:71:e8:d5:65:5a:6d:e3:06:47:4a:cd:cf:dc:81:
86:71:75:94:16:5e:26:ec:12:e5:da:1e:79:0a:be:
6b:0c:89:10:10:d3:a6:c3:8d:61:ac:af:7f:f5:dd:
de:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C8:70:1F:D3:F1:A2:05:8E:A6:59:59:75:1D:4E:4D:A9:93:BE:FA
X509v3 Authority Key Identifier:
keyid:49:83:76:D2:A2:20:3D:86:E7:9A:6D:44:49:5A:BF:C4:89:03:14:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYN20qIgPYbnmm1ESVq_xIkDFGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:61:9b:68:4a:26:22:e3:76:f3:44:5b:17:d1:0c:77:86:2c:
0d:c6:0c:60:e9:a2:64:58:ab:d0:a4:f9:fd:ac:f5:40:90:33:
4e:3b:7a:cc:c4:d4:05:ab:c1:8b:dd:c4:25:dc:84:5a:a8:11:
c1:20:83:e5:53:11:0b:d9:92:3e:f7:42:73:0d:af:4a:48:3c:
a8:3e:90:dd:b0:23:2e:ac:72:d9:6e:c2:1a:64:99:9f:c4:83:
7b:4f:97:e5:98:bf:b1:ae:55:f5:d0:86:f9:92:93:8f:69:4c:
eb:53:d3:b1:ab:ed:68:a4:93:a6:82:61:18:95:0e:c2:80:a9:
c7:e6:3a:f9:bd:f3:df:71:d4:63:fe:b4:1a:1c:66:46:1b:21:
42:7b:8e:f1:71:1b:3d:bf:5d:a4:32:a3:09:e7:67:bf:c2:b9:
b7:26:ef:d2:62:9d:19:b7:17:da:a5:88:cd:e3:71:39:ab:10:
c8:e5:8d:08:a9:8d:7c:57:0f:f4:81:47:81:d5:e9:d4:ee:d4:
56:1f:98:97:cb:18:2d:35:c9:c0:07:6c:4b:93:1f:4d:25:10:
03:d7:6d:ef:56:c4:78:c0:c4:32:04:42:f1:29:73:0d:89:ba:
af:69:c3:54:a6:b6:29:9f:02:6a:1f:fa:9b:95:fe:95:5a:3c:
c1:5a:51:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:14 2026 by rpki-client